CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
Confidence
Low
EPSS
Percentile
9.0%
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device.
This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | identity_services_engine_software | 2.7.0 | cpe:2.3:a:cisco:identity_services_engine_software:2.7.0:*:*:*:*:*:*:* |
cisco | identity_services_engine_software | 3.0.0 | cpe:2.3:a:cisco:identity_services_engine_software:3.0.0:*:*:*:*:*:*:* |
cisco | identity_services_engine_software | 3.1.0 | cpe:2.3:a:cisco:identity_services_engine_software:3.1.0:*:*:*:*:*:*:* |
cisco | identity_services_engine_software | 3.2.0 | cpe:2.3:a:cisco:identity_services_engine_software:3.2.0:*:*:*:*:*:*:* |
cisco | identity_services_engine_software | 3.3.0 | cpe:2.3:a:cisco:identity_services_engine_software:3.3.0:*:*:*:*:*:*:* |
[
{
"vendor": "Cisco",
"product": "Cisco Identity Services Engine Software",
"versions": [
{
"version": "2.7.0",
"status": "affected"
},
{
"version": "2.7.0 p1",
"status": "affected"
},
{
"version": "2.7.0 p2",
"status": "affected"
},
{
"version": "2.7.0 p3",
"status": "affected"
},
{
"version": "2.7.0 p4",
"status": "affected"
},
{
"version": "2.7.0 p5",
"status": "affected"
},
{
"version": "2.7.0 p6",
"status": "affected"
},
{
"version": "2.7.0 p7",
"status": "affected"
},
{
"version": "2.7.0 p8",
"status": "affected"
},
{
"version": "2.7.0 p9",
"status": "affected"
},
{
"version": "2.7.0 p10",
"status": "affected"
},
{
"version": "3.0.0",
"status": "affected"
},
{
"version": "3.0.0 p1",
"status": "affected"
},
{
"version": "3.0.0 p2",
"status": "affected"
},
{
"version": "3.0.0 p3",
"status": "affected"
},
{
"version": "3.0.0 p4",
"status": "affected"
},
{
"version": "3.0.0 p5",
"status": "affected"
},
{
"version": "3.0.0 p6",
"status": "affected"
},
{
"version": "3.0.0 p7",
"status": "affected"
},
{
"version": "3.0.0 p8",
"status": "affected"
},
{
"version": "3.1.0",
"status": "affected"
},
{
"version": "3.1.0 p1",
"status": "affected"
},
{
"version": "3.1.0 p3",
"status": "affected"
},
{
"version": "3.1.0 p2",
"status": "affected"
},
{
"version": "3.1.0 p4",
"status": "affected"
},
{
"version": "3.1.0 p5",
"status": "affected"
},
{
"version": "3.1.0 p6",
"status": "affected"
},
{
"version": "3.1.0 p7",
"status": "affected"
},
{
"version": "3.1.0 p8",
"status": "affected"
},
{
"version": "3.2.0",
"status": "affected"
},
{
"version": "3.2.0 p1",
"status": "affected"
},
{
"version": "3.2.0 p2",
"status": "affected"
},
{
"version": "3.2.0 p3",
"status": "affected"
},
{
"version": "3.2.0 p4",
"status": "affected"
},
{
"version": "3.3.0",
"status": "affected"
}
]
}
]